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The MAILING DATE of this communication appears on the cover sheet with the correspondence address - 
Period for Reply 

A SHORTENED STATUTORY PERIOD FOR REPLY IS SET TO EXPIRE 3 MONTH(S) FROM 
THE MAILING DATE OF THIS COMMUNICATION. 

• Extensions of time may be available under the provisions of 37 CFR 1 .136(a). In no event, tiowever, may a reply be timely filed 
after SIX (6) MONTHS from the mailing date of this communication. 

- If the period for reply specified above is less than thirty (30) days, a reply wWU'm the statutory minimum of thirty (30) days will be considered timely. 

- If NO period for reply is specified above, the maximum statutory period will apply and will expire SIX (6) MONTHS from the mailing date of this communication. 

- Failure to reply within the set or extended period for reply will, by statute, cause the application to become ABANDONED (35 U.S.C. § 133). 

- Any reply received by the Office later than three months after the mailing date of this communication, even if timely filed, may reduce any 
earned patent term adjustment. See 37 CFR 1.704(b). 

Status 



2a)n 
3)0 



Responsive to communication(s) filed on . 

This action is FINAL. 2b)^ This action is non-final. 



Since this application is in condition for allowance except for fomnal matters, prosecution as to the merits is 
closed in accordance with the practice under £x pa/Ye Quayle, 1935 CD. 11, 453 O.G. 213. 
Disposition of Clainfis 

4) ^ Claim(s) 1-13 is/are pending in the application. 

4a) Of the above claim(s) is/are withdrawn from consideration. 

5) 0 Claim(s) is/are allowed. 

6) M Claim(s) 1-13 is/are rejected. 
?)□ Claim(s) is/are objected to. 

8) n Claim(s) are subject to restriction and/or election requirement. 

Application Papers 

9) 0 The specification is objected to by the Examiner. 

10) 0 The drawing(s) filed on is/are: a)n accepted or b)\3 objected to by the Examiner. 

Applicant may not request that any objection to the drawing(s) be held in abeyance. See 37 CFR 1 .85(a). 

11) n The proposed drawing correction filed on is: a)n approved b)n disapproved by the Examiner 

If approved, corrected drawings are required in reply to this Office action. 

12) 0 The oath or declaration is objected to by the Examiner. 
Priority under 35 U.S.C. §§119 and 1 20 

13) 0 Acknowledgment is made of a claim for foreign priority under 35 U.S.C. § 1 19(a)-(d) or (f). 

a)nAII b)n Some*c)n None of: 

1 Certified copies of the priority documents have been received. 

2.n Certified copies of the priority documents have been received in Application No. . 



3.n Copies of the certified copies of the priority documents have been received in this National Stage 
application from the International Bureau (PCT Rule 17.2(a)). 
* See the attached detailed Office action for a list of the certified copies not received. 

14) n Acknowledgment is made of a claim for domestic priority under 35 U.S.C. § 1 19(e) (to a provisional plication). 

a) □ The translation of the foreign language provisional application has been received. V^?^ IfMN''^^ 
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DETAILED ACTION 



2. 



Claim Objections 
Claim 8 is objected to because of the following informalities: 

In claim 8, line 6: "a application" should be changed to —an apphcation--. Correction is 
required. 



The following is a quotation of the appropriate paragraphs of 35 U.S. C. 102 that form the 
basis for the rejections under this section made in this Office action: 

A person shall be entitled to a patent unless - 

(b) the invention was patented or described in a printed publication in this or a foreign country or in public use or on 
sale in this country, more than one year prior to the date of apphcation for patent in the United States. 

Claims 1-13 are rejected under 35 U.S. C 102(b) as being anticipated by Reed et al (U.S. 
Patent No. 5,862,325.) 

As to claim 1, Reed et al teaches an automated (see Abstract) authentication handling 
system (see column 26, lines 12-15) for use by clients (see column 26, lines 15-16) on a 
network (see Abstract, and see column 27, lines 62-64) comprising: 

a plurality of application servers connected to the network (see column 9, lines 50-65, 
and see column 25, lines 15-18), each requiring authentication for access (see column 26, 
lines 12-16); and 



Claim Rejections - 35 USC §102 



Application/Control Number: 09/675,399 Page 3 

Art Unit: 2175 

an authentication server (see column 97, line 60 through column 98, line 1) adapted to 
authenticate at least one of the clients (see column 98, line 11-16) and estabUsh a trusted 
communication link for access by an authenticated user to at least one of the appUcation 
servers (see column 100, lines 52-57, and see column 107, lines 44-51.) 

As to claim 2, Reed et al teaches wherein the authentication server (see column 97, line 
60 through column 98, line 1) includes: 

an identification engine configured to maintain collections of session assignments for 
accessing the application servers, each of the session assignment collections being associated 
with a cUent identifier (see column 26, lines 36-46, where "identification engine" is read on 
"system ID assignment function", "maintam collection of session assignments" is read on 
"control the access".) 

As to claim 3, Reed et al teaches wherein the identification engine (see column 26, lines 
36-46, where "identification engine" is read on "system ID assignment function") is adapted 
to receive client identifiers fi-om the clients to establish authenticated users and responsive 
thereto to provide a user interface to access the application servers according to the 
associated session assignments (see column 26, lines 33-66.) 
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As to claim 4, Reed et al teaches wherein the authentication server (see column 97, line 
60 through column 98, line 1) includes: 

a communication initiator engine (see column 109, hnes 19-28) configured to establish a 
trusted communication link between the authenticated users and the apphcation servers (see 
column 100, lines 52-57, and see column 107, lines 44-51.) 

As to claim 5, Reed et al teaches wherein the authentication server (see column 97, line 
60 through column 98, line 1) includes: 

a communication initiator engine (see column 109, lines 19-28) configured to establish a 
trusted communication link (see column 100, lines 52-57, and see column 107, lines 44-51) 
defined to one of the session assignments between the authenticated users and the apphcation 
servers (see column 1 10, hnes 35-44.) 

As to claim 6, Reed et al teaches wherein the session assignments include data fields (see 
column 67, line 64 through column 68, line 3) selected from the group consisting of session 
timeout and apphcation access level (see column 70, line 63 through column 70, line 10.) 



As to claim 7, Reed et al teaches wherein the client identifiers include a user id and 
password (see column 72, lines 22-42.) 
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As to claim 8, Reed et al teaches wherein the authentication includes a processor under 
the control of software (see column 13, lines 7-12) to: 

receive an authentication signal from the cUent (see column 28, lines 25-37); 

provide an application access interface to the cUent in response to the authentication 
signal (see figures 22-24) ; and 

estabhsh a trusted communication link between the client and an application server 
selected from the apphcation access interface (see column 100, lines 52-57, and see column 
107, Imes 44-51.) 

As to claim 9, Reed et al teaches a method for automatically authenticating a chent (see 
column 26, lines 12-15) for a plurality of application servers (see column 9, lines 50-65, and 
see column 25, Unes 15-18) comprising the steps of: 

providing an authentication server (see column 97, line 60 through column 98, line 1); 

identifying clients for access to the application servers by the authentication server (see 
column 78, lines 25-32); and 

estabhshing a trusted communication link between at least one of the clients and at least 
one of the apphcation servers (see column 100, lines 52-57, and see column 107, lines 44- 



51.) 



As to claim 10, Reed et al teaches wherein the identifying step includes: 
providing a session parameters for each of the identified chents for at least one of the 
apphcation servers (see column 34, lines 18-47.) 
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As to claim 1 1, Reed et al teaches wherein the identifying step includes: 
providing a user interface to the identified clients for accessing the application servers 
(see column 68, lines 9-13.) 

As to claim 12, Reed et al teaches wherein the establishing step includes: 
using the session parameters (see column 34, lines 18-47) to estabUsh the trusted 
communication link (see column 100, lines 52-57, and see column 107, Unes 44-5 L) 

As to claim 13, Reed et al teaches wherein the user interface includes a Usting of 
apphcation servers (see column 102, line 66 through column 103, line 7) and the establishing 
step is initiated following a selection of an application server by a user from the user 
interface (see column 26, lines 47-64.) 

Conclusion 

4. The prior art made of record and not reUed upon is considered pertinent to applicant's 
disclosure. 

The following patents are cited to further show the state of art with respect to methods 
and systems of automatic authentication in general: 
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Patent No. 


Issued to 


Cited for teaching 


Pub. No. US 
2001/0044898 


Benussi et al. 


Configuration and authentication processes. 


Pub. No. US 
2002/0054587 


Baker et al. 


Web station configuration and client authentication. 



5. Any inquiries concerning this communication or earlier communications fi*om the examiner 
should be directed to Tony Mahmoudi whose telephone number is (703) 305-4887. The 
examiner can normally be reached on Mondays-Fridays fi"om 08:00 am to 04:30 pm. 

If attempts to reach the examiner by telephone are unsuccessful, the examiner's 
supervisor, Dov Popovici, can be reached at (703) 305-3830. 
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